zagan-bet/web/play/style.css, branch masterEverything about zagan-bet casino is here.
https://git.2137697.xyz/zagan-bet/atom?h=master2026-11-08T11:28:48Zweb: disallow crawlers and quiet the game port2026-11-08T11:28:48Zsalmoniksalmonik@tuta.io2026-11-08T11:28:48Zurn:sha1:8681fcf565643f67a36cb1fe571fac7843d2b6af
Adds robots.txt with Disallow: / plus noindex/X-Robots-Tag on the site and app. The v5 server treats an HTTP request as a malformed frame, closes silently before HELLO, and suppresses the common TLS scanner noise. Deploy now verifies robots.txt.
web: match the desktop layout and remove play-money copy2026-11-08T11:24:25Zsalmoniksalmonik@tuta.io2026-11-08T11:24:25Zurn:sha1:c45ff4525c0e45e4b8e762b81fd180c53d206d66
The browser now uses the desktop's full-width game split: no extra game header or card frame, a full-height sidebar with a pinned action block, and the same lobby grid, topbar account/balance blocks, and bottom-left notices. Slots uses the desktop symbol colours and gold win border; roulette gets the flat felt, column bets under the dozens, the wheel, circular chips, and a LAST line; blackjack gets a centred dealer/player table and divider; crash gets the chart panel, phase label and empty ready state.
Also drops every play-money/real-money disclaimer from the page copy.
web: link the GPL source from the play page; normalise gateway config2026-11-08T02:38:48Zsalmoniksalmonik@tuta.io2026-11-08T02:38:48Zurn:sha1:10bd35e6b6d34d58b93700b498609926aa5d90ba
The browser footer links the public repository. ZAGAN_WEB_ORIGIN is lowercased for origin matching, and the pinned fingerprint accepts the colon-separated form operators often copy.
v5.0.0: protocol v5 and the browser frontend2026-11-08T02:29:35Zsalmoniksalmonik@tuta.io2026-11-08T02:29:35Zurn:sha1:058432130628d00764663ecf819a9adc6793768d
Protocol v5 replaces newline lines with bounded [u32 len][text] frames and REQ/RES/EVT envelopes. Requests carry correlation ids and the server replays the last 256 replies per connection, so a gateway retry cannot double-debit and a late reply cannot clobber a newer request. HELLO/PONG carry server time; crash rounds announce started_at and push coalesced 10 Hz ticks. Crash now commits sha256(seed) before a round and reveals the seed when it ends, so clients recompute the crash point.
Adds the webd/ gateway: one blocking thread, one ClientCore and one pinned upstream TLS connection per session, an HttpOnly session cookie, takeover, and a 60-second grace window. The browser sends Command JSON and renders View JSON; it never speaks the game protocol or stores credentials.
Adds the vanilla TypeScript browser app at /play/ (login, lobby, all four games, history, notices, crash verification), the nginx /play and /ws routes, and the headless DOM smoke test. webd and the app stay out of the TUI/GUI/server build graph.
The client/server version moves to 5.0.0 in lockstep; v4 peers are refused at HELLO.